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DETAILED ACTION 

1 . This office action is in response to Applicant's amendnaent filed on August 1 , 
2005. Clainns 1-2, 8-9, 11-13, 15-16, 19 and 23-25 have been amended. Claims 4-7, 
10, 17-18, 20-22 and 26-33 are cancelled. New Claims 42-50 are added. Claims 1-3, 8- 
9, 11-16, 19, 23-25 and 34-50 are pending. 

Claim Objections 

2. Claims 24 and 25 are objected to because of the following informalities: Both 
claims have not been provided with the proper status. "Original" should be changed to 
"Currently Amended". Appropriate correction is required. 

Response to Arguments 

3. Applicant's arguments filed August 1 , 2005 have been fully considered but they 
are not persuasive. In response to the arguments concerning the previously rejected 
claims, the following comments are made: 

The Applicant argues Stoltz et al. (U.S. Patent 6,615,264) does not disclose one 
or more tokens can be converted to the authenticated token that is in turn used to 
associate the user with the session. The Examiner disagrees and maintains the 
rejection. Stoltz discloses an authentication system that is configured to authenticate a 
user based on a different authentication mechanism (e.g. smart card, login, password or 
biometrics) and may be utilized in connection with one or more sessions. (Abstract) 
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Furthermore, Stoltz discloses a user may access a session by initiating a login or other 
authentication mechanism, in which the user is validated and may be associated with a 
particular session. (Col. 7, lines 61-Col. 8, lines 1-6) 

The Applicant argues Stoltz fails to disclose a user is assigned one or more 
tokens, each of which can be converted to the authenticated token. The Examiner 
disagrees and maintains all the rejections. Stoltz discloses a user may access a session 
by initiating a login or other authentication mechanism; tokens may be encoded into 
smart cards. (Col. 7, lines 61-63). Stoltz further discloses an authentication modules 
may be structured for any mechanism that verifies the identity of the user to the system. 
A key or password or biometrics can be used to authenticate a user based on a smart 
card while another authentication my be utilized to authenticate a user based on a key 
or password or biometrics information. (Col. 9, lines 17-40) 

The Applicant argues Stoltz does not disclose the user can access the same 
session on the second terminal while the session is still being accessed by the first 
terminal. The Examiner disagrees and maintains the rejections. Stoltz discloses 
authenticating and relocating a user's session based on the current location of the user 
without requiring performing user validation. (Col. 7, lines 16-20) In addition Stoltz 
further discloses a user may be associated with a particular session (Col. 8, lines 1-2) 

The Examiner disagrees with the Applicant and maintains all rejections. All 
amendments and argument by the Applicant have been considered. It is the Examiner's 
conclusion that calms 1-3, 8-9, 11-16, 19, 23-25, 34 and 42-50 are not patentably 
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distinct or non-obvious over the prior art of record. Therefore, all the rejection is 
maintained as given below. 

Claim Rejections - 35 USC § 102 

4. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

5. Claims 1-34 and 42-50 are rejected under 35 U.S.C. 102(e) as being anticipated 
by Stoltz et al. United States Letter Patent Number 6,615,264. 

As per claims 1 and 23: 

Stoltz teaches a method and a computer program for accessing a session 
comprising: 

converting a first token of one or more tokens assigned to a user to an 
authenticated token; (Col. 3, lines 12-17; Col. 7, lines 61-65; Col. 9, lines 18-40; Col. 10, 
lines 30-35) 

associating said user with said session using said authenticated token; and (Col. 
7, lines 61-67; Col. 8; lines 1-2; a user may access a system by initiating a login or other 
authentication mechanism ... a user may be associated with a particular session) 
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presenting said authenticated token to access said session from a first terminal, 
wherein each token of the one or more tokens assigned to said user can be 
implemented to authenticate said user, and further wherein said authenticated token 
can be created by each token of the one or more tokens assigned to said user. (Col. 7, 
lines 61-Col. 8, lines 1-6; Col. 8, lines 35-39; Col. 9, lines 39-40; Col. 10, lines 13-15 
lines 35-37; Col. 11, lines 19-22) Col. 8, lines 8-9; Col. 9, lines 19-45) 
As per claims 2 and 24: 

Stoltz teaches all the subject matter as discussed above. In addition, Stoltz 
further discloses a method and a computer program comprising: 

converting a second token of the one or more tokens assigned to said user to 
said authenticated token, said second token being implemented to authenticate said 
user; (CoL 9, lines 27-34) and presenting said authenticated token to access said 
session from a second terminal. (Col. 6, lines 16-20; Col. 8, lines 1-2; Col. 9, lines 48- 
50; Col. 11, lines 31-40; the user can log back in using a network terminal such as 
network terminal 202, connect to session and interact with the services ... there can be 
multiple instances of network terminal 202; Col. 13, lines 58; multiple session can be 
associated with a user) 
As per claims 3 and 14: 

Stoltz teaches all the subject matter as discussed above. In addition, Stoltz 
further discloses a method and a system comprising: 

sending a session disconnect signal to said first terminal; (Col. 15, lines 57-58; 
when disconnect message is received, session manager sends a disconnect message 
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to each one of the services directing them to terminate sending I/O to network terminal) 
and 

routing input and output for said session to said second terminal. (Col. 14, lines 
24-32; ...user is connected to network terminal ...direct input/output to network terminal) 
As per claims 8, 9, 19, 45, 46 and 50: 

Stoltz teaches all the subject matter as discussed above. In addition, Stoltz 
further discloses a method, a system and a computer program wherein said biometric 
identifier is a finger print pattern or a retinal image. (Col. 3, lines 15-16; Col. 8, lines 37- 
38; Col. 10, lines 57-58; Col. 16, lines 53-54) 
As per claim 1 1 : 

Stoltz teaches all the subject matter as discussed above. In addition, Stoltz 
further discloses a method wherein said session is identified by said authenticated 
token. (Col. 10, lines 35-39; Col. 11, lines 65-67; Col. 12, lines 1-30) 
As per claim 12: 

Stoltz teaches a session accessing system comprising: 
an associating unit configured to associate a user with a session using an 
authenticated token created using an initial token assigned to said user, (Col. 7, lines 
61-67; Col. 8; lines 1-2; a user may access a system by initiating a login or other 
authentication mechanism ... a user may be associated with a particular session) said 
associating unit including. 
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a converting unit configured to convert said initial token to said authenticated 
token; (Col. 3, lines 12-17; Col. 7, lines 61-65; Col. 9, lines 18-40; Col. 10, lines 30-35) 
and 

a first presenting unit configured to present said authenticated token to access 
said session form a first terminal. (Col. 7, lines 61 -Col. 8, lines 1-6; Col. 8, lines 35-39; 
Col. 9, lines 39-40; Col. 10, lines 13-15 lines 35-37; Col. 11. lines 19-22) 
As per claim 13: 

Stoltz teaches all the subject matter as discussed above. In addition, Stoltz 
further discloses a system comprising: 

a second presenting unit configured to present said authenticated token to 
access said session from a second terminal while said session is still being accessed 
from said first terminal. (Col. 6, lines 16-20; Col. 8, lines 1-2; Col. 9, lines 48-50; Col. 11, 
lines 31-40; Col. 13, lines 58) 
As per claim 15: 

Stoltz teaches all the subject matter as discussed above. In addition, Stoltz 
further discloses a system wherein said step of associating unit further comprises: 

authenticating an identity of said user implementing said initial token. (Col. 3, 
lines 12-17; Col. 7, lines 61-65) 
As per claims 16, 43 and 49: 

Stoltz teaches all the subject matter as discussed above. In addition, Stoltz 
further discloses a method, a system and a computer program wherein said step of 
authenticating comprises: 
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obtaining said first token, said first token being a physical token, a passphrase or 
a biometric identifier assigned to said user. (Col. 3, lines 15-16; using smart card, using 
login and password, using biometric data, etc.) 
As per claim 25: 

Stoltz teaches all the subject matter as discussed above. In addition, Stoltz 
further discloses a computer program comprising: 

computer readable code configured to cause one or more computers to send a 
session disconnect signal to said first terminal; (Col. 15, lines 57-58; when disconnect 
message is received, session manager sends a disconnect message to each one of the 
services directing them to terminate sending I/O to network terminal) and 

computer readable code configured to cause said one or more computers to 
route input and output for said session to said second terminal. (Col. 14, lines 24-32; 
...user is connected to network terminal ...direct input/output to network terminal) 
As per claim 34: 

Stoltz teaches a method of accessing a session comprising: 

authenticating an identity of a user implementing a first token of one or more 
tokens assigned to said user; (Col. 3, lines 12-17; Col. 7, lines 61-65) 

converting said first token of one or more tokens to an authenticated token; (Col, 
3, lines 12-17; Col, 7, lines 61-65; Col. 9, lines 18-40; Col. 10, lines 30-35) 

associating said user with said session using said authenticated token; (Col. 7, 
lines 61-67; Col. 8; lines 1-2; a user may access a system by initiating a login or other 
authentication mechanism ... a user may be associated with a particular session) and 
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presenting said authenticated token to access said session fronn a first terminal, 
(Col. 8, lines 35-39; Col. 9, lines 39-40; Col. 10. lines 13-15 lines 35-37; Col. 11, lines 
19-22) 

wherein said authenticated token can be created using each token of the one or 
more tokens. (Col. 3, lines 12-17; Col. 7, lines 61-65; Col. 9, lines 18-40; Col. 10, lines 
30-35) 

As per claims 42 and 47: 

Stoltz teaches all the subject matter as discussed above. In addition, Stoltz 
further discloses wherein said first token is the same as said second token or said first 
token is different from said second token. (Abstract; Col. 7, lines 61-64; Col. 8, lines 8-9; 
Col. 9, lines 19-45) 
As per claim 44: 

Stoltz teaches all the subject matter as discussed above. In addition, Stoltz 
further discloses a method wherein said step of authenticating comprises: 

obtaining said second token, said second token being a physical token, a 
passphrase or a biometric identifier assigned to said user. (Col. 3, lines 15-16; using 
smart card, using login and password, using biometric data, etc.) 
As per claim 48: 

Stoltz teaches all the subject matter as discussed above. In addition, Stoltz 
further discloses a computer program further comprising: 

Computer readable code configured to cause said one or more computer to 
authenticate an identity of said user implementing each token of the one or more 
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tokens, (Col. 3, lines 12-17; Col. 7, lines 61-65; Col. 9, lines 17-40) said computer 
readable code including, 

computer readable code configured to cause said one or more computers to 
obtain said first token of said one or more tokens, and computer readable code 
configured to cause said one or more computers to obtain second token. (Col. 3, lines 
15-16; using smart card, using login and password, using biometric data, etc.; Col. 9, 
lines 17-40) 

Allowable subject matter 

6. Claim 35 is objected to as being dependent upon a rejected base claim but would 
be allowable if rewritten independent from including all of the limitation of the base claim 
and any intervening claims. The claimed invention comprises authenticating identity of 
user by implementing a second token of one or more tokens assigned to the user, 
presenting the authenticated token to access said session from second terminal while 
the session is still being accessed from said first terminal which is not covered by the 
prior art. 

Claims 36-41, which are directly or indirectly dependents of claim 35 are also 
objected. 

7. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. See PTO Form 892. 
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8. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shewaye Gelagay whose telephone number is 571-272- 
4219. The examiner can normally be reached on 8:00 am to 5:30 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Albert Decady can be reached on 571-272-3819. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Shewaye Gelagay 
10/07/05 





